2026-07-16_45ef8d9e94cfdbc0676a203230b5a9c9_amadey_coinminer_darkgate_elex_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-16_45ef8d9e94cfdbc0676a203230b5a9c9_amadey_coinminer_darkgate_elex_smoke-loader_stop
Size 8.0MB
Sample260716-e4519sgv8s
SHA256 d95fecd69fc3e008a96b8069868a71c6c095771772383ca586b9bdec32fe2450
MD5 45ef8d9e94cfdbc0676a203230b5a9c9
SHA1 1d2396e3f46d2b552c2926aaf84120f40b4c3fad
SHA512 5ac18ba9fbf86b41b8bbb9398a677a12644322ae859ee7bb8cf6fd46d450b41fe05046a3d97a897f5f57782c634a22a3bb02acf7153d53cfb3f819a7e97f9cd1
SSDEEP 196608:kXnP1SaVueMAPn5Hh6ClpGM7j5L8GDIAPZ+Hh40:SP1nMYn55lpGuVgAI
TLSH
T18686AEA2B606E2DFC14A06F4D517CE4AED2C47B542104853DE69797FEE72C822BC7A1C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-16_45ef8d9e94cfdbc0676a203230b5a9c9_amadey_coinminer_darkgate_elex_smoke-loader_stop

File Explorer

2026-07-16_45ef8d9e94cfdbc0676a203230b5a9c9_amadey_coinminer_darkgate_elex_smoke-loader_stop

.exe 8.0MB

2026-07-16_45ef8d9e94cfdbc0676a203230b5a9c9_amadey_coinminer_darkgate_elex_smoke-loader_stop

SHA256 d95fecd69fc3e008a96b8069868a71c6c095771772383ca586b9bdec32fe2450
MD5 45ef8d9e94cfdbc0676a203230b5a9c9
SHA1 1d2396e3f46d2b552c2926aaf84120f40b4c3fad
SHA512 5ac18ba9fbf86b41b8bbb9398a677a12644322ae859ee7bb8cf6fd46d450b41fe05046a3d97a897f5f57782c634a22a3bb02acf7153d53cfb3f819a7e97f9cd1
SSDEEP 196608:kXnP1SaVueMAPn5Hh6ClpGM7j5L8GDIAPZ+Hh40:SP1nMYn55lpGuVgAI
TLSH
T18686AEA2B606E2DFC14A06F4D517CE4AED2C47B542104853DE69797FEE72C822BC7A1C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5722200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

828KB

Virtual Size

828KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

126KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

14KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

86KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

40KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vikey

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-16_45ef8d9e94cfdbc0676a203230b5a9c9_amadey_coinminer_darkgate_elex_smoke-loader_stop

generic